Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-1999-1337

FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.

  • Published: Aug 1, 1999
  • Updated: Apr 13, 2023
  • CVE: CVE-1999-1337
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
midnight_commander / midnight_commander - 4.5.11.x